Progress® Telerik® UI for ASP.NET AJAX Feedback Portal
Back to Feed
Request a Feature Report a Bug
Duplicated
Last Updated: 17 Aug 2026 15:11 by ADMIN
Hira
Created on: 17 Aug 2026 10:35
Category: UI for ASP.NET AJAX
Type: Feature Request
1
Content Security Policy issue related to inline scripts in Progress Telerik UI for ASP.NET AJAX.

Hi Progress Telerik Team,

Our security team has reported a Content Security Policy issue related to inline scripts in Progress Telerik UI for ASP.NET AJAX. Could you please add nonce support for inline scripts so we can resolve this issue in a compliant way?

Please let us know if you need any additional details from our side.

Thank you,
Hira Kewlani

Duplicated
This item is a duplicate of an already existing item. You can find the original item here:
CSP support for nonce and SHA256 hash in Telerik ASP.NET AJAX
2 comments
ADMIN
Rumen
Posted on: 17 Aug 2026 15:11

Hello Hira,

Thank you for submitting this feature request and for sharing the details about your custom ResponseStream implementation.

This request duplicates our existing feature request concerning nonce and SHA-256 CSP support for Telerik UI for ASP.NET AJAX:

https://feedback.telerik.com/aspnet-ajax/1481440-csp-support-for-nonce-and-sha256-hash-in-telerik-asp-net-ajax 

Your ResponseStream approach is an application-level customization that post-processes the generated response. While it may be applicable to your specific application, it is outside the supported Telerik control API and does not change the underlying ASP.NET WebForms limitation described in the linked request.

For this reason, we are linking this item to the existing request, where the product team's evaluation and decision are available.

Regards,
Rumen
Progress Telerik

Stay tuned by visiting our public roadmap and feedback portal pages! Or perhaps, if you are new to our Telerik family, check out our getting started resources! 
Hira
Posted on: 17 Aug 2026 10:44

I have updated the script tags imported by the ASP.NET Web Forms framework with nonce by updating the ResponseStream.

Create an account Log In
View
Type
Status
Category